Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/7dae7a15-92d5-3a05-9576-1a80ff484bb0.roa
File:                     7dae7a15-92d5-3a05-9576-1a80ff484bb0.roa (raw, json)
Hash identifier:          fAyo7Jar3KFFmOqr5owGx1Qz6tTmnkC0nUoE3GbY4YY=
Subject key identifier:   02:60:AD:69:67:45:4C:E6:DF:83:4B:31:53:5C:DA:F6:17:FF:9F:4B
Certificate issuer:       /CN=e699b02b-ca04-4557-94f4-189989d49ccd
Certificate serial:       010D0C9F4328584ADD666FCF392457AEE24B2BC0
Authority key identifier: 5E:AF:98:D1:00:83:CD:28:7D:A6:48:52:90:CA:41:DB:EC:6E:31:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/7dae7a15-92d5-3a05-9576-1a80ff484bb0.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     8987
IP address blocks:        72.18.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:6f:cf:39:24:57:ae:e2:4b:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e699b02b-ca04-4557-94f4-189989d49ccd
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=57ba8210-cea6-4c9e-ab0e-57c470644124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2d:32:d3:7c:02:53:e5:a4:f2:a1:b5:19:15:
                    17:09:52:bc:04:1c:1e:f8:14:0c:38:97:8d:b3:e0:
                    1e:d4:53:ed:71:c7:34:de:13:6b:9d:65:7d:c0:85:
                    bd:0b:30:8d:04:2e:5a:8e:56:93:78:8e:26:52:73:
                    d5:8f:41:b0:20:e4:c2:03:51:a5:43:1a:82:5a:06:
                    f7:0b:39:3e:3a:64:13:ac:a5:d3:f1:c8:9a:e9:2e:
                    28:ed:b6:fa:73:61:d5:03:21:57:20:3e:4d:87:ff:
                    52:7c:f1:95:a7:a0:71:c5:b5:d8:68:b0:00:9b:ed:
                    28:b9:c5:c7:84:f9:a8:79:f8:1a:58:dd:42:91:9d:
                    65:4b:15:a7:35:51:34:1a:fe:9c:a2:20:73:b5:92:
                    0c:c3:b0:96:c8:6a:92:a9:76:92:12:cf:73:c8:a6:
                    81:f8:64:62:36:42:4c:7d:83:09:6e:66:81:f4:50:
                    9d:ee:61:c2:7b:a6:09:7e:e7:0b:fa:f0:13:6e:f5:
                    92:ae:a5:c2:9c:15:fc:70:31:78:5d:20:2a:fd:6c:
                    22:1b:95:39:27:63:24:ab:71:18:ac:03:83:51:5c:
                    5b:3c:d7:67:a7:13:62:ae:74:99:ab:0c:6f:da:64:
                    37:de:1f:05:06:83:93:8f:d3:5f:c2:b7:42:35:e3:
                    fb:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:60:AD:69:67:45:4C:E6:DF:83:4B:31:53:5C:DA:F6:17:FF:9F:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/7dae7a15-92d5-3a05-9576-1a80ff484bb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.crl

            X509v3 Authority Key Identifier:
                keyid:5E:AF:98:D1:00:83:CD:28:7D:A6:48:52:90:CA:41:DB:EC:6E:31:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.18.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:8a:54:ab:f7:e6:7a:32:b3:54:81:0a:30:34:0f:ac:78:c0:
         8d:65:e7:23:34:d1:72:9b:ba:e8:21:cd:c2:d6:d2:15:69:cb:
         a1:8f:56:2d:ff:1c:43:67:30:97:b4:1b:49:74:8e:4b:9c:0e:
         88:69:1a:8d:ca:45:78:36:d2:dc:3b:0e:12:53:6e:44:df:f4:
         78:9c:92:68:cd:29:14:c3:db:a9:c5:ac:39:49:05:a0:95:6e:
         35:77:34:37:83:12:f1:d8:59:48:89:cc:80:02:2d:66:b7:a9:
         3b:c4:2b:26:2e:52:09:ab:65:d8:e2:26:fa:98:09:51:e7:b3:
         0b:15:97:db:e4:f4:ca:e7:83:08:72:66:ff:82:ef:b6:55:14:
         35:98:4f:00:91:24:bc:1a:f6:69:6c:69:10:c6:88:9e:5f:db:
         5b:08:a0:a0:d3:13:8a:0f:04:df:45:81:fd:61:4c:5b:5b:01:
         7f:75:2e:a6:2d:b0:0d:f4:9f:fb:21:05:30:7c:bf:c9:33:78:
         8d:a5:59:2c:d1:89:3c:29:fa:3f:f1:bc:84:3b:54:01:4c:01:
         53:22:b3:a3:3e:33:da:2c:26:ce:02:cd:62:08:8c:b8:e3:88:
         71:04:43:97:b4:ce:ae:53:52:6f:bf:8c:58:85:78:d2:07:b5:
         60:6d:14:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZm/POSRXruJLK8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTY5OWIwMmItY2EwNC00NTU3LTk0ZjQtMTg5OTg5ZDQ5
Y2NkMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk
NTdiYTgyMTAtY2VhNi00YzllLWFiMGUtNTdjNDcwNjQ0MTI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhS0y03wCU+Wk8qG1GRUXCVK8BBwe+BQMOJeN
s+Ae1FPtccc03hNrnWV9wIW9CzCNBC5ajlaTeI4mUnPVj0GwIOTCA1GlQxqCWgb3
Czk+OmQTrKXT8cia6S4o7bb6c2HVAyFXID5Nh/9SfPGVp6BxxbXYaLAAm+0oucXH
hPmoefgaWN1CkZ1lSxWnNVE0Gv6coiBztZIMw7CWyGqSqXaSEs9zyKaB+GRiNkJM
fYMJbmaB9FCd7mHCe6YJfucL+vATbvWSrqXCnBX8cDF4XSAq/WwiG5U5J2Mkq3EY
rAODUVxbPNdnpxNirnSZqwxv2mQ33h8FBoOTj9NfwrdCNeP76wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAJgrWlnRUzm34NLMVNc2vYX/59LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lNjk5
YjAyYi1jYTA0LTQ1NTctOTRmNC0xODk5ODlkNDljY2QvN2RhZTdhMTUtOTJkNS0z
YTA1LTk1NzYtMWE4MGZmNDg0YmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTY5OWIwMmItY2EwNC00NTU3LTk0
ZjQtMTg5OTg5ZDQ5Y2NkL2U2OTliMDJiLWNhMDQtNDU1Ny05NGY0LTE4OTk4OWQ0
OWNjZC5jcmwwHwYDVR0jBBgwFoAUXq+Y0QCDzSh9pkhSkMpB2+xuMXcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9lNjk5YjAyYi1jYTA0LTQ1NTctOTRmNC0xODk5
ODlkNDljY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBJNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIKKVKv35noys1SBCjA0D6x4wI1l5yM00XKbuughzcLW0hVpy6GPVi3/
HENnMJe0G0l0jkucDohpGo3KRXg20tw7DhJTbkTf9HickmjNKRTD26nFrDlJBaCV
bjV3NDeDEvHYWUiJzIACLWa3qTvEKyYuUgmrZdjiJvqYCVHnswsVl9vk9Mrngwhy
Zv+C77ZVFDWYTwCRJLwa9mlsaRDGiJ5f21sIoKDTE4oPBN9Fgf1hTFtbAX91LqYt
sA30n/shBTB8v8kzeI2lWSzRiTwp+j/xvIQ7VAFMAVMis6M+M9osJs4CzWIIjLjj
iHEEQ5e0zq5TUm+/jFiFeNIHtWBtFN8=
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:35:31 2025 by rpki-client